In order make user account accessible from mobile devices we should do
the following
In Exchange Server 2010,
you may also experience this issue if the Exchange Servers group does not have
the appropriate permission to the mailbox object in Active Directory. The most
common cause for this is broken Access Control List (ACL) inheritance in Active
Directory.
To check whether
inheritance is disabled on the user:
1.
Open Active
Directory Users and Computers.
2.
On the menu at the top of
the console, click View > Advanced Features.
3.
Locate and right-click the
mailbox account in the console, and then click Properties.
4.
Click the Security tab.
5.
Click Advanced.
6.
Make sure that the check
box for "Include inheritable permissions from this object's parent"
is selected.
If the user is a member of
certain protected groups such as Domain Administrators, it is normal for this
box to be unchecked. If you are experiencing a problem with members of these
protected groups you should check the permissions on the AdminSDHolder object.
Note:
We recommend that you do not use accounts that are members of protected groups for e-mail purposes. If you require the rights that are afforded to a protected group, we recommend that you have two Active Directory user accounts. These Active Directory accounts include one user account that is added to a protected group and one user account that is used for e-mail purposes and at all other times.
If we still have problem in accessing the email it better to
check through Microsoft Remote Connectivity Analyzer
Then select Microsoft
Exchange ActiveSync Connectivity Tests then Exchange ActiveSync
Then type in the user name and
his password to check what is the kind of the problem is.
0 Comments